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Top Stories 

• Heavy rain closed portions of Interstate 17 and other major roads in Phoenix, Arizona, 
August 19 and prompted at least a dozen rescues of residents and motorists trapped in 
vehicles and homes, flooded a school, and swept away hundreds of cactuses from a farm 
while flights were delayed up to 2 hours due to the storm. - Associated Press (See item 8) 

• Firefighters reached 35 percent containment August 19 of the Junction Fire in California 
near the south entrance to Yosemite National Park, and mandatory evacuations were lifted 
for California State Route 41 and all areas west of the highway. - Los Angeles Times (See 
item 1^) 

• Authorities in Aurora, Colorado, charged three juvenile males August 19 in connection 
with attempting to detonate a pipe bomb at Mrachek Middle School August 9, prompting 
the cancellation of classes after the device was discovered August 11. 

- KUSA 9 Denver (See item 2 ^ 

• Mizado Cocina, a restaurant in New Orleans, Louisiana, notified about 8,000 customers 
that their payment card information may have been breached after the business discovered 
that a hacker installed malware known as Backoff on the restaurant’s point of sale system 
May 9. - New Orleans Times-Picayune (See item 31) 
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Energy Sector 

1. August 20, Scranton Times-Tribune - (Pennsylvania) DEP fines Cabot $76,000 for 
January well leak. The Pennsylvania Department of Environmental Protection 
announced August 19 that it issued a $76,546 fine against Cabot Oil & Gas Corp., July 
23 for a January 5 gas leak on the Huston J 1 well in Brooklyn Township in 
Susquehanna County. A contractor failed to warm the wellhead before replacing 
equipment and caused damage to the wing valve allowing gas to escape into the 
atmosphere. 

Source: http://thetimes-tribune.eom/news/dep-fines-cabot-76-000-for-ianuarv- well- 
leak- 1.1738409 

2. August 20, WLWT 5 Cincinnati; Associated Press - (Ohio) Officials: Cause of Duke 
Energy fuel spill appears to be human error. The U.S. Coast Guard reported that the 
cause of a nearly 5,000-gallon Duke Energy oil spill into the Ohio River appeared to be 
human error after someone left a valve open at the Beckjord Generating Station in New 
Richmond August 18. A 15-mile stretch of the river reopened while a no-wake zone 
remained in place. 

Source: http://www.wlwt.com/news/work-to-contain-fuel-spill-from-duke-energy- 
plant-continues/27 616124 

Eor another story, see item 17 
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Chemical Industry Sector 

See item 11 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

3. August 19, U.S. Department of Labor - (Illinois) OSHA cites Illinois vehicle 

manufacturer McLaughlin Body Co. for exposing workers to amputation hazards. 

The Occupational Safety and Health Administration cited commercial, agricultural, and 
military vehicle components manufacturer McEaughlin Body Co., for nine serious 
violations at the company’s East Moline and Rock Island facilities for exposing 
workers to amputation hazards. Proposed fines totaled $43,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS REEEA 
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SES&p id=26556 
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Defense Industrial Base Sector 

4. August 19, Defense News - (National) US Air Force grounds 82 F-16Ds after cracks 
discovered. The U.S. Air Force’s Air Combat Command (ACC) announced August 19 
that 82 fighters from its 157-plane F-16D Fighting Falcon fleet were grounded 
following a fleet-wide inspection order that was initiated after canopy sill longeron 
cracks were found between the front and rear pilot seats during a routine post- flight 
inspection. The ACC is working with Fockheed Martin engineers to determine the 
cause of the cracks and how to repair the jets. 

Source: http://www.defensenews.eom/article/20140819/DFFRFG02/308190027/US- 
Air-Force-Grounds-82-F-16Ds-After-Cracks-Discovered 



For another story, see item 3 
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Financial Services Sector 

5. August 19, South Florida Sun Sentinel - (Florida) Ponzi ‘feeder’ admits $20M role in 
fraud. A Coral Springs man pleaded guilty in federal court August 19 to directing over 
$20 million of investors’ funds into a $1.4 billion Ponzi scheme before it collapsed in 
2009. 

Source: http://articles.sun-sentinel.eom/2014-08-19/news/fl-frank-preve-rothstein- 
pleads-20140819 1 rothstein-fraud-ponzi-scheme-scott-rothstein 

6. August 19, Bellingham Herald - (Washington) ‘Alabama Band Bandit’ bank robber 
caught in Everett. The suspect known as the “Alabama Band Bandit” was arrested 
August 19 in Fverett. The Woodinville man is suspected in the robbery of five banks in 
western Washington during July. 

Source: http://www.bellinghamherald.eom/2014/08/19/3809829/alabama-band-bandit- 
bank-robber.html 

7. August 19, WBAL 11 Baltimore - (Maryland) Man arrested on credit card fraud, 
theft charges. A New York City man was arrested August 19 at a Target store in Glen 
Bumie for allegedly using over 100 suspected cloned payment cards to purchase 
around $17,000 worth of gift cards. 

Source: http://www.wbaltv.com/news/man-arrested-on-credit-card-fraud-theft- 
charges/27617 400 

For additional stories, see items 2^ and 31 
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Transportation Systems Sector 



8. August 20, Associated Press - (Arizona) Flood leads to dramatic rescues in Phoenix 
area. Heavy rain and flooding closed portions of Interstate 17 and several other major 
roads in Phoenix August 19 while flights from Phoenix Sky Harbor International 
Airport were delayed up to 2 hours due to the storm. The storm prompted at least a 
dozen rescues of residents and motorists trapped in vehicles and homes, flooded a 
school, and swept away hundreds of cactuses and other plants from a farm. 

Source: http://news.msn.com/us/floods-force-dramatic-rescues-in-phoenix-area 

9. August 20, Atlanta Journal-Constitution - (Georgia) One westbound lane of 1-20 still 
closed after fiery wreck. One lane of westbound Interstate 20 in Carroll County 
reopened to traffic about 3 hours after a FedEx semi-truck rear-ended a bus, causing 
both vehicles to overturn and catch fire August 20. Both drivers were injured and taken 
to the hospital. 

Source: http://www.aic.com/news/news/i-20-in-carroll-countv-shut-down-by-wreck- 
involvin/ngSxf/ 

10. August 18, Visalia Times-Delta - (California) Big rig rollover crash closes Paige 
Avenue on-, off-ramp. A semi-truck carrying 30,000 pounds of frozen meat 
overturned and crashed near an off-ramp on Highway 99 in Tulare August 17, 
prompting authorities to close the ramp and causing northbound traffic delays for more 
than 8 hours until the road was cleared. 

Source: http://www.visaliatimesdelta.eom/storv/news/local/2014/08/19/big-rig- 
rollo ver-crash-closes-paige-avenue-ramps/ 1 42733 1 9/ 
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Food and Agriculture Sector 

August 20, Pottstown Mercury; Chester County Daily Local News - (Pennsylvania) 
Hazmat team responds to chemical spill in West Pikeland. A farm tractor pulling an 
800-gallon tank filled with a nitrogen-based pesticide flipped onto its side and spilled 
about 500 gallons of the chemical onto Route 1 13, storm drains, and the property of a 
Sunoco gas station in West Pikeland August 19. Crews contained the spill and the 
Chester County HAZMAT team determined the release posed no human health threat. 
Source: http://www.pottsmerc.eom/general-news/20140820/hazmat-team-responds-to- 
chemical-spill-in-west-pikeland 

12. August 19, Food Safety News - (National) 12-ounce bottles of Corona Extra beer 
recalled for possible glass particles. Victor, New York-based Constellation Brands 
Beer Division issued a voluntary recall for select packages of its 12-ounce bottles of 
Corona Extra beer due to the possibility that they may contain small particles of glass. 
The recall was initiated after the company’s routine quality control inspections detected 
defects in certain bottles, provided by a third-party manufacturer, which could cause 
small particles of glass to break off and fall into the bottle. 

Source: http://www .foodsafetynews .com/20 1 4/08/ 1 2-ounce-bottles-of-corona-extra- 



- 4 - 



beer-recalled-for-possible-glass-particles 



13. August 19, U.S. Food and Drug Administration - (International) nSPIRED Natural 
Foods, Inc. voluntarily recalls certain retail lots of Arrowhead Mills Peanut 
Butters, Maranatha Almond Butters and Peanut Butters and specific private label 
nut butters because of possible health risk. The U.S. Food and Drug Administration 
announeed August 19 that nSpired Natural Foods, Ine. issued a reeall for eertain lots of 
its Arrowhead Mills Peanut Butters, MaraNatha Almond Butters and Peanut Butters, 
and specifie private label nut butters due to possible Salmonella contamination. The 
company received reports of four illnesses potentially associated with the products, 
which were packaged in glass and plastic jars and sold via Internet sales throughout the 
United States, Canada, Hong Kong, United Arab Emirates, and Dominican Republic. 
Source: http://www.fda.gov/Safetv/Recalls/ucm41Q533.htm 

For additional stories, see items 3 , 8 , and 10 
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Water and Wastewater Systems Sector 

14. August 20, Rutland Herald - (Vermont) Fair Haven issues boil-water order. 
Authorities issued a boil water advisory to residents living in Fair Haven August 19 
after finding E.coli in the water supply. Town officials reported that the issue was 
expected to be fixed within 24-48 hours. 

Source: http://www.rutlandherald.eom/article/20140820/THISJUSTIN/708209914 
Eor another story, see item 2 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

16. August 20, Merrillville Post-Tribune - (Indiana) Fire shuts building at Lake 
government center. Building A at the Take County Government Center in Crown 
Point reopened August 20 after it was evacuated August 19 due to a small fire that was 
found when workers reported a suspicious smell coming through the building’s 
ventilation system. Welders inadvertently sparked the fire August 18 while working on 
converting former office space into a 9-1-1 center. 

Source: http://posttrib.suntimes.com/news/lake/29354885-418/fire-closes-building-at- 
lake-govemment-center.html 
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17. August 20, Associated Press - (Indiana) Power outages from storms close South 
Bend high school, delay openings in Indianapolis area. Clay High School in South 
Bend was closed August 20 after storms knocked out electricity to the building and to 
more than 20,000 homes and businesses around Indiana. 

Source: 

http://www.therepublic.com/view/storv/b03c86al652f487fab42c3b9fc787d85/IN- 

Indiana-Storms 

18. August 19, Los Angeles Times - (California) Junction fire near Yosemite 35% 
contained as firefighters make progress. Firefighters reached 35 percent containment 
August 19 of the Junction Fire, which was downgraded in size to 612 acres near the 
south entrance to Yosemite National Park in the Sierra foothills. Mandatory 
evacuations were lifted for California State Route 41 and nearly all areas west of the 
highway. 

Source: http://www.latimes.com/local/lanow/la-me-ln-firefighters-make-progress- 
iunction-fire-20140819-story.html 

19. August 19, Associated Press - (Wyoming) Gas leaks close Campbell County 
Courthouse. Construction workers accidentally ruptured a gas line forcing the closure 
of the Campbell County Courthouse in Gillette August 19. The building was reopened 
to county workers after about 4 hours but remained closed to the public. 

Source: http://www.kulr8.com/storv/26321692/gas-leaks-closes-campbell-county- 
courthouse 

20. August 19, WHNS 21 Greenville - (South Carolina) Power outage prompts 
Springfield Elementary evacuation; no school Wednesday. Classes were cancelled 
August 20 at Springfield Elementary School in Greenwood County due to a power 
outage August 19 that prompted an evacuation of students and staff. 

Source: http://www.foxcarolina.com/storv/26318790/students-evacuated-after-power- 
outage-at-springfield-elementary 

21. August 19, KUSA 9 Denver - (Colorado) 3 juveniles charged in pipe bomb incident. 
Aurora authorities charged three juvenile males August 19 in connection with 
attempting to detonate a pipe bomb at Mrachek Middle School August 9, prompting the 
cancellation of classes after the device, which only briefly ignited, was discovered 
August 11. 

Source: http ://www .9news .com/storv/news/local/20 1 4/08/ 1 9/3-j uveniles-charged-in- 
pipe-bomb-incident/ 14307353/ 
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Emergency Services Sector 

22. August 19, McAlester News-Capital - (Oklahoma) Sheriff’s office loses radio 
connection, temporarily. The Pittsburg County Sheriffs office and dispatch station 
experienced radio disruptions for 4 hours August 17 due to an electrical outage at a 
repeater station off State Highway 113. 
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Source: http://www.mcalestemews.com/news/article 16d46c4a-27d8-lle4-9ece- 
Q01a4bcf887a.html 
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Information Technology Sector 

23. August 20, The Register - (International) Cryptolocker flogged on YouTube. Two 
researchers reported that cybercriminals have been observed to use purchased ad space 
on YouTube in order to redirect users to malicious sites serving the Cryptolocker 
ransomware. The researchers are scheduled to present at the Virus Bulletin 2014 
conference detailing how legitimate ad networks could be used to spread malware. 
Source: http://www.theregister.co.uk/2014/08/20/crvptolocker flogged on youtube/ 

24. August 20, Securityweek - (International) Vulnerability in WordPress Mobile Pack 
exposes password-protected posts. Researchers with dxw Security identified and 
reported a vulnerability in the Mobile Pack plugin for WordPress that could allow 
access to password-protected posts. The vulnerability was reported July 24 and closed 
August 19 with the release of Mobile Pack version 2.0.2. 

Source: http://www.securitvweek.com/vulnerabilitv-wordpress-mobile-pack-exposes- 
password-protected-posts 

25. August 19, IDG News Service - (International) ‘Reveton’ ransomware upgraded with 
powerful password stealer. Avast researchers analyzed a new variant of the Reveton 
ransomware that now includes the Pony password and virtual currency stealer and a 
Papras family password stealer that can also disable security programs. The new variant 
was also programmed to check if an infected user had visited the Web sites of 17 
German banks. 

Source: http://www.networkworld.com/article/2466981/reveton-ransomware-upgraded- 
with-powerful-password-stealer.html 

26. August 19, SC Magazine - (International) Bug in iOS Instagram app fixed, impacts 
Facebook accounts. 10 Active researchers reported that an issue in the Instagram app 
for iOS could leave users open to having their Facebook access token intercepted over 
public Wi-Fi due to the app sending the token in plain text. The issue was fixed in 
Instagram version 6.0.4 and users were advised to update to the latest version. 

Source: http://www.scmagazine.com/bug-in-ios-instagram-app-fixed-impacts- 
facebook-accounts/article/367039/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



27. August 20, Harrisburg Patriot News- (Pennsylvania) Comcast outage leaves 

downtown Harrisburg customers without phone or internet service. About 2,800 
Comcast customers in downtown Harrisburg were without phone and Internet service 
when the company was experiencing routing-type issues that caused the outage August 
20. Employees at the Martin Luther King Government Center also lost Internet 
connectivity in the outage. 

Source: 

http://www.pennlive.com/midstate/index.ssf/2014/08/comcast phone internet down h 
a.html 
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Commercial Facilities Sector 

28. August 20, Associated Press - (New York) Macy's to pay $650,000 in shopper- 
profiling probe. Macy’s entered into an agreement with the New York Attorney 
General’s office August 19 to settle allegations that the retailer’s loss prevention 
procedures at its Herald Square store in Manhattan in New York City were 
discriminatory and displayed racial profiling. The retailer will pay $650,000 in fines 
and will adopt new polices on employee training, police access to security camera 
monitors, and against profiling. 

Source: http://news.msn.eom/us/macvs-to-pav-dollar650000-in-shopper-profiling- 
probe 

29. August 20, WHIG 7 Dayton - (Ohio) Stonebridge Apartment Homes fire not 
believed suspicious. Fifty residents were displaced and 18 units were damaged by an 
August 19 fire that engulfed the Stonebridge Apartment Homes complex in 
Beavercreek, Ohio. Authorities are investigating the cause of the blaze, which is 
believed to have started on the second story balcony. 

Source: http://www.whio.com/news/news/local/fire-breaks-out-stonebridge-apartment- 
homes/ng5kL/ 

30. August 20, Maryville Daily Times - (Tennessee) Maryville man arrested in Walmart 
bomb threat. Maryville police arrested and charged a suspect August 19 believed to be 
connected to a bomb threat that forced a more than 2-hour evacuation of a Walmart 
store and nearby gas station in Maryville July 26. 

Source: http://www.thedailvtimes.com/news/marvville-man-arrested-in-walmart-bomb- 
threat/article 964c4fbc-d700-5ecf-a887-2fe6f8649353.html 

21. August 19, New Orleans Times-Picayune - (Louisiana) Restaurant Mizado Cocina 
says customer credit card data breached by hacker. The New Orleans restaurant 
Mizado Cocina notified about 8,000 customers that their payment card information, 
including names, card numbers, and CVV security codes, may have been breached after 
the business discovered that a hacker installed malware known as Backoff on the 
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restaurant’s point of sale system May 9. The restaurant’s IT company replaced affected 
computer hardware and the business’s point of sale system was secured July 18. 
Source: 

http://www.nola.com/business/index.ssf/2014/Q8/restaurant mizado cocina says.html 

32. August 18, KYTX 19 Nacogdoches - (Texas) Warrant issued in deadly skating rink 
stabbing. Police in Greeneville, Texas, are searching for a suspect believed to have 
fatally stabbed two individuals and injured several others during an apparent dispute at 
the Greenville Skate Safari roller rink in August 16. 

Source: http://www.cbsl9.tv/storv/26297081/greenville-skating-ring-stabbing-killed- 
victims-identified 



For additional stories, see items 8 and 17 
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Dams Sector 



Nothing to report 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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